Global Protect does not Work after transfering licences from PA-500 to OSS SPARE

[mbeghdadi]

Hello To All,

I'm facing an issue after doing a migration.

We'd an issue with a FAN on PA-500, so RMA works fine 

We decided to transfer licences from PA-500 fan error to OSS Spare.

Everything went well until we do realize that Global Protect is not working anymore.

The Synch between AD/LDAP and PALO is OK

When we try to log-in to Global protect through the agent We got an error "portal status is User authentication failed"

Could you please let me know if there are some checks r procedure to investigate further..

[pulukas]

This appears more like a configuration of the LDAP authentication than a license issue.  Do you have a copy of the original configuration to compare?

If there is nothing obvious missing, check the authd.log for more details.  Look at steps 12 & 13 here:

https://live.paloaltonetworks.com/t5/Management-Articles/Troubleshooting-GlobalProtect/ta-p/75770

With the more detailed LDAP troubleshooting here:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Troubleshoot-LDAP-Authentication/ta-...